This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/52/C6K3jC5XM9ASI6FKufijhi7adTg.roa File: C6K3jC5XM9ASI6FKufijhi7adTg.roa (raw, json) Hash identifier: u3XsDQJkYk2HyM52oU60Q0OQDYgDvEqy89GCu9/wm1o= Subject key identifier: 0B:A2:B7:8C:2E:57:33:D0:12:23:A1:4A:B9:F8:A3:86:2E:DA:75:38 Certificate issuer: /CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Certificate serial: 0620 Authority key identifier: DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/C6K3jC5XM9ASI6FKufijhi7adTg.roa Signing time: Thu 06 Nov 2025 02:47:40 +0000 ROA not before: Thu 06 Nov 2025 02:47:40 +0000 ROA not after: Fri 23 Oct 2026 03:01:03 +0000 asID: 9812 IP address blocks: 114.60.0.0/14 maxlen: 14 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Dec 2025 01:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1568 (0x620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA1DABECF1945DFF53B620E0B6C410E91E4471B1 Validity Not Before: Nov 6 02:47:40 2025 GMT Not After : Oct 23 03:01:03 2026 GMT Subject: CN=0BA2B78C2E5733D01223A14AB9F8A3862EDA7538 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:82:02:12:3b:bc:b3:23:1a:9b:9e:a7:f7:f8: 50:6c:6c:07:72:ad:59:28:11:4a:14:82:00:01:85: af:a6:e1:4b:fa:60:6d:33:d3:62:ff:42:99:b3:dd: 61:b1:02:99:ac:2b:e0:06:be:3b:04:df:6a:91:94: ad:31:44:10:19:28:ea:3a:46:e2:f4:0e:d0:4c:d3: 53:70:6d:fc:06:00:91:9d:f1:ec:db:fe:1b:53:fe: b6:20:4c:6b:74:d8:39:d4:01:26:d3:f3:e1:6c:a5: 86:b0:01:54:18:38:fb:b1:7b:3d:68:57:8e:61:1a: b2:28:51:93:06:10:e7:a3:49:81:a9:f1:05:46:10: f0:cc:bf:3e:19:75:f5:58:af:3e:2d:91:11:ff:e2: e3:2c:6d:7c:93:6c:a9:a4:01:09:16:7e:0a:90:11: 2e:11:cb:63:0f:fa:10:06:e1:68:e5:0c:fd:b8:af: c0:ac:3b:27:9e:56:7b:8e:63:6c:23:3f:24:06:20: f7:66:61:26:fa:73:d8:0f:fd:a6:2d:a3:d2:b6:da: f6:fc:5c:22:1a:76:d2:36:92:cb:eb:28:6f:86:8e: 69:4d:35:fb:5f:bf:8c:40:93:b6:45:4f:98:80:e2: 96:19:98:97:23:06:df:2c:2d:25:c6:6d:47:36:77: b4:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:A2:B7:8C:2E:57:33:D0:12:23:A1:4A:B9:F8:A3:86:2E:DA:75:38 X509v3 Authority Key Identifier: keyid:DA:1D:AB:EC:F1:94:5D:FF:53:B6:20:E0:B6:C4:10:E9:1E:44:71:B1 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2h2r7PGUXf9TtiDgtsQQ6R5EcbE.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/52/C6K3jC5XM9ASI6FKufijhi7adTg.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 114.60.0.0/14 Signature Algorithm: sha256WithRSAEncryption 67:d3:e5:14:a3:f2:1d:b6:7e:f9:ea:14:2d:8f:66:19:a2:6b: f3:f1:47:f4:16:df:5c:8f:0e:14:48:41:82:5f:e6:e1:23:ac: c3:0f:98:e9:64:8d:01:40:6b:cf:a6:b6:89:f6:5f:a2:fc:b1: 88:ed:8a:02:79:30:fd:89:e7:3c:ab:54:35:02:1d:fa:56:1e: 9d:e6:d5:6f:dd:30:71:2e:99:77:52:ea:28:97:d8:ad:44:f5: 4c:24:bf:54:b7:61:de:79:0f:ad:5a:1c:98:0b:41:50:c8:2a: 22:62:90:ec:b7:0b:a2:fd:f9:b8:2a:68:4a:f0:0b:71:2d:19: 74:be:d6:64:4e:35:56:de:b1:5e:08:b5:2f:07:6f:86:0e:e6: a6:2a:e7:9d:ad:9f:1e:8c:70:d8:c6:7e:0f:45:ae:58:ee:16: eb:c8:1a:81:be:04:e4:c0:1a:ed:42:37:13:61:13:13:38:ff: ef:f3:d7:ca:43:b8:91:df:96:38:4c:65:5c:45:79:e1:61:a8: e9:ce:3b:ba:2a:76:8d:4d:a1:4a:ea:a1:10:27:6e:48:ae:52: 30:78:2d:87:24:69:a2:ef:ba:08:5a:d9:04:41:76:32:27:3a: f6:36:65:77:e3:0d:85:bc:aa:28:64:8d:24:18:70:b6:b5:91: ad:05:3d:69 -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoREEx REFCRUNGMTk0NURGRjUzQjYyMEUwQjZDNDEwRTkxRTQ0NzFCMTAeFw0yNTExMDYw MjQ3NDBaFw0yNjEwMjMwMzAxMDNaMDMxMTAvBgNVBAMTKDBCQTJCNzhDMkU1NzMz RDAxMjIzQTE0QUI5RjhBMzg2MkVEQTc1MzgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDiggISO7yzIxqbnqf3+FBsbAdyrVkoEUoUggABha+m4Uv6YG0z 02L/Qpmz3WGxApmsK+AGvjsE32qRlK0xRBAZKOo6RuL0DtBM01NwbfwGAJGd8ezb /htT/rYgTGt02DnUASbT8+FspYawAVQYOPuxez1oV45hGrIoUZMGEOejSYGp8QVG EPDMvz4ZdfVYrz4tkRH/4uMsbXyTbKmkAQkWfgqQES4Ry2MP+hAG4WjlDP24r8Cs OyeeVnuOY2wjPyQGIPdmYSb6c9gP/aYto9K22vb8XCIadtI2ksvrKG+GjmlNNftf v4xAk7ZFT5iA4pYZmJcjBt8sLSXGbUc2d7RnAgMBAAGjggHuMIIB6jAdBgNVHQ4E FgQUC6K3jC5XM9ASI6FKufijhi7adTgwHwYDVR0jBBgwFoAU2h2r7PGUXf9TtiDg tsQQ6R5EcbEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBbBgNVHR8EVDBSMFCg TqBMhkpyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTIv MmgycjdQR1VYZjlUdGlEZ3RzUVE2UjVFY2JFLmNybDBjBggrBgEFBQcBAQRXMFUw UwYIKwYBBQUHMAKGR3JzeW5jOi8vcnBraS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNE MDAwMC8yaDJyN1BHVVhmOVR0aURndHNRUTZSNUVjYkUuY2VyMA4GA1UdDwEB/wQE AwIHgDCBmwYIKwYBBQUHAQsEgY4wgYswVgYIKwYBBQUHMAuGSnJzeW5jOi8vcnBr aS5jbm5pYy5jbi9ycGtpL0E5MTYyRTNEMDAwMC81Mi9DNkszakM1WE05QVNJNkZL dWZpamhpN2FkVGcucm9hMDEGCCsGAQUFBzANhiVodHRwczovL3Jwa2kuY25uaWMu Y24vcnJkcC9ub3RpZnkueG1sMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMC cjwwDQYJKoZIhvcNAQELBQADggEBAGfT5RSj8h22fvnqFC2PZhmia/PxR/QW31yP DhRIQYJf5uEjrMMPmOlkjQFAa8+mton2X6L8sYjtigJ5MP2J5zyrVDUCHfpWHp3m 1W/dMHEumXdS6iiX2K1E9Uwkv1S3Yd55D61aHJgLQVDIKiJikOy3C6L9+bgqaErw C3EtGXS+1mRONVbesV4ItS8Hb4YO5qYq552tnx6McNjGfg9FrljuFuvIGoG+BOTA Gu1CNxNhExM4/+/z18pDuJHfljhMZVxFeeFhqOnOO7oqdo1NoUrqoRAnbkiuUjB4 LYckaaLvugha2QRBdjInOvY2ZXfjDYW8qihkjSQYcLa1ka0FPWk= -----END CERTIFICATE-----Generated at Fri Dec 5 00:30:29 2025 by rpki-client